$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa File: 0F7F7F6A072311ED8067812FC4F9AE02.roa (raw, json) Hash identifier: DhwMFnUZQB/f3TGPpuAZRsXHmvWzDgaPXM6D5bpKbz8= Subject key identifier: B9:77:CB:51:8B:E0:93:A2:E1:B0:CA:13:C5:9D:C8:DE:4F:E8:14:81 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7BFE Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa Signing time: Thu 31 Aug 2023 17:44:41 +0000 ROA not before: Thu 31 Aug 2023 17:44:41 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 2914 IP address blocks: 103.13.80.0/22 maxlen: 23 202.68.64.0/20 maxlen: 23 203.4.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 17:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31742 (0x7bfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Aug 31 17:44:41 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64f0d189-0848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:87:88:09:f0:69:b2:a9:de:b4:86:ea:e1: c1:6b:80:52:6b:35:fc:6c:ad:dd:57:98:29:0f:0b: ff:63:38:5e:ae:6a:da:92:a3:aa:77:6f:b9:36:b4: cd:7d:5e:87:1b:12:4a:05:80:2e:42:10:99:7c:9c: a1:ad:30:3f:c8:bc:51:23:67:11:0a:be:95:aa:6a: 95:cd:6c:5a:7b:02:9f:7b:ba:d6:b0:26:c2:42:2e: 35:b1:3e:b2:e5:60:52:6e:ad:4f:e0:d5:cc:b3:0d: b0:8f:f5:64:f4:39:b9:91:7b:d2:49:e4:5d:21:b9: 94:9b:72:5e:97:ff:aa:4e:2b:f1:fb:9e:40:1e:ce: 58:7c:3b:76:f5:bb:e2:dd:50:31:2a:bc:f9:69:19: c2:79:05:11:ce:8f:0c:b8:b8:d8:b1:34:ac:d9:ac: 43:ba:1a:d8:38:6c:c2:37:08:99:4c:58:f8:0f:77: 8e:5b:7b:12:0c:dd:24:da:29:cd:57:6c:87:d4:33: 93:cb:99:1e:07:3a:c4:e2:cf:73:ad:ea:24:c1:9a: d9:fc:dc:74:63:f9:a0:27:b4:a2:d4:8a:18:4a:fa: 82:90:bb:24:14:83:ef:03:11:41:c0:e0:76:57:83: 8e:b4:d0:07:4c:7b:17:57:ee:a4:9c:86:b3:62:d7: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:77:CB:51:8B:E0:93:A2:E1:B0:CA:13:C5:9D:C8:DE:4F:E8:14:81 X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.13.80.0/22 202.68.64.0/20 203.4.212.0/22 Signature Algorithm: sha256WithRSAEncryption a2:c0:f0:85:81:4b:60:06:83:9d:0d:db:7f:45:f6:d7:c8:51: f8:8e:19:10:f1:12:d9:e1:fc:57:dd:c0:ad:7e:22:ac:eb:87: 06:67:0d:bd:36:19:ee:4b:ed:7b:25:de:c3:34:32:f3:6f:5b: 79:3f:df:a1:32:fb:81:83:a7:55:79:d2:d0:95:01:27:68:38: 32:3f:54:d7:2f:55:42:e5:0e:fd:1e:db:d7:50:cd:f5:60:0f: 1e:6d:f8:61:d4:e5:a7:2c:46:1f:56:b3:8b:9c:93:e1:1f:e1: 95:c8:a4:ae:b8:6e:9e:55:05:99:6c:f9:4d:4b:63:80:15:94: c8:8c:99:6b:a0:45:fc:e3:e5:65:0c:fe:12:f7:9e:6e:42:e2: 59:95:2a:f4:df:e1:60:dc:63:22:02:d4:57:ce:1f:ce:55:46: be:b5:0e:0e:c4:3c:74:93:8e:ec:1c:78:35:35:e0:89:b8:f5: ab:37:3e:c2:88:36:6a:d5:28:3d:0a:83:b0:64:55:01:54:91: 4e:12:98:67:14:2c:55:57:86:ca:98:1a:3a:ad:0b:a3:c3:61: ab:26:7a:83:03:a8:dc:5f:33:ac:b5:b5:8b:73:33:c1:e9:f3: 7d:ca:22:7f:76:fd:e9:1e:0c:2b:82:36:e2:15:8e:1f:18:f9: 70:94:43:2e -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICe/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjMwODMxMTc0NDQxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGYwZDE4OS0wODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvGHiAnwabKp3rSG6uHBa4BSazX8bK3dV5gpDwv/YzhermrakqOqd2+5NrTN fV6HGxJKBYAuQhCZfJyhrTA/yLxRI2cRCr6VqmqVzWxaewKfe7rWsCbCQi41sT6y 5WBSbq1P4NXMsw2wj/Vk9Dm5kXvSSeRdIbmUm3Jel/+qTivx+55AHs5YfDt29bvi 3VAxKrz5aRnCeQURzo8MuLjYsTSs2axDuhrYOGzCNwiZTFj4D3eOW3sSDN0k2inN V2yH1DOTy5keBzrE4s9zreokwZrZ/Nx0Y/mgJ7Si1IoYSvqCkLskFIPvAxFBwOB2 V4OOtNAHTHsXV+6knIazYtcgxwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLl3y1GL 4JOi4bDKE8WdyN5P6BSBMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkwMEQvRkNEQ0QzQTBBQzlEMTFFODkyQ0RBRDBEQzRGOUFFMDIvMEY3RjdGNkEw NzIzMTFFRDgwNjc4MTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnDVADBATKREADBALLBNQwDQYJKoZIhvcNAQELBQADggEB AKLA8IWBS2AGg50N239F9tfIUfiOGRDxEtnh/FfdwK1+IqzrhwZnDb02Ge5L7Xsl 3sM0MvNvW3k/36Ey+4GDp1V50tCVASdoODI/VNcvVULlDv0e29dQzfVgDx5t+GHU 5acsRh9Ws4uck+Ef4ZXIpK64bp5VBZls+U1LY4AVlMiMmWugRfzj5WUM/hL3nm5C 4lmVKvTf4WDcYyIC1FfOH85VRr61Dg7EPHSTjuwceDU14Im49as3PsKINmrVKD0K g7BkVQFUkU4SmGcULFVXhsqYGjqtC6PDYasmeoMDqNxfM6y1tYtzM8Hp833KIn92 /ekeDCuCNuIVjh8Y+XCUQy4= -----END CERTIFICATE-----Generated at Wed Apr 24 18:31:00 2024 by rpki-client on console-fra.rpki-client.org